VMs already use virtual network interfaces, which are by default bridged to `vmbr0`, a bridge that proxmox creates by default which is also bridged to the hardware NIC. For your use case, you simply want to create a second bridge, e.g. `vmbr1`, which is not bridged to the hardware NIC. You would then assign two virtual NICs to opnsense, one on each bridge (WAN and LAN, essentially) and then choose `vmbr1` as the bridge each time you create an "internal" service behind opnsense.
Since selecting the bridge for a service's NIC is part of setting up each service, the only thing such a "glue script" would be doing is creating the `vmbr1` bridge. That's already a one-liner.
A high SAT score is table stakes for Ivy application, not in any way a free pass. Successful applicants generally need impeccable grades, documented community service + extracurricular activities, stellar recommendations, etc. Or alternatively, be a "legacy", meaning your ancestors attended that school, which is more often than not a proxy for "be rich."
I don't doubt your characterization of the situation in France at all, and there are certainly a plethora of great universities in the U.S. that have reasonably accessible admissions, but the "top" schools (Ivys, MIT/Caltech, etc.) are certainly beyond the reach of many, and favor those who know how to play their game.
This comment contains one of the most-repeated pieces of misinformation from the whole blackout: moderation tools. Reddit has stated repeatedly that moderation tools will be exempted from the API changes.
"We will ensure existing utilities, especially moderation tools, have free access to our API."[1]
Since selecting the bridge for a service's NIC is part of setting up each service, the only thing such a "glue script" would be doing is creating the `vmbr1` bridge. That's already a one-liner.